Lucene search
Veracode Vulnerability DatabaseVERACODE:45006HistoryJan 11, 2024 - 7:45 a.m.
Denial Of Service (DoS)
2024-01-1107:45:57
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
10
denial of service
libgpac
av1
mp4 file
media tools
CVSS3
5.5
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
AI Score
6.6
Confidence
High
EPSS
0
Percentile
12.7%
libgpac is vulnerable to Denial Of Service. The vulnerability is due to an infinite loop within the av1_uvlc at media_tools/av_parsers.c function which allows an attacker to cause denial of service via a malicious MP4 file.
References
Related
debiancve
debiancve
CVE-2023-50120
2024-01-10 09:15:44
prion
prion
Design/Logic Flaw
2024-01-10 09:15:00
cvelist
cvelist
CVE-2023-50120
2024-01-10 00:00:00
ubuntucve
ubuntucve
CVE-2023-50120
2024-01-10 00:00:00
cve
cve
CVE-2023-50120
2024-01-10 09:15:44
osv
osv
CVE-2023-50120
2024-01-10 09:15:44
nvd
nvd
CVE-2023-50120
2024-01-10 09:15:44
redos
redos
ROS-20240807-06
2024-08-07 00:00:00
CVSS3
5.5
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
AI Score
6.6
Confidence
High
EPSS
0
Percentile
12.7%
Related for VERACODE:45006